Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
File:                     58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer (raw, json)
Hash identifier:          3vZc0OJQRLUs2BHeHgAFxHuFLTM28K2Fmvt08n/N7Xs=
Subject key identifier:   E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority key identifier: 7D:26:E3:D5:24:B2:0A:B1:53:3F:85:38:71:0A:8A:B2:97:DF:07:1E
Certificate issuer:       /CN=ae85d24a-77d4-4cf7-80aa-c071199c2889
Certificate serial:       010D0C9F432858474F74EEAD5DD2DFE413510640
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Mon 23 Sep 2024 14:24:24 +0000
Certificate not after:    Sun 27 Dec 2026 15:24:24 +0000
Subordinate resources:    AS: 395841
                          IP: 64.4.168.0/22
                          IP: 208.91.188.0/22
                          IP: 2604:7c0::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:74:ee:ad:5d:d2:df:e4:13:51:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae85d24a-77d4-4cf7-80aa-c071199c2889
        Validity
            Not Before: Sep 23 14:24:24 2024 GMT
            Not After : Dec 27 15:24:24 2026 GMT
        Subject: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:a2:e3:b6:84:97:ae:72:5e:a7:71:74:ee:
                    b4:c6:d4:9d:4d:f2:f3:6d:86:9c:f1:a8:65:46:83:
                    8d:b1:be:9e:c2:8b:e6:b0:d4:df:b8:e8:cf:95:af:
                    77:a5:64:f7:cd:70:45:2c:17:b5:ec:53:3d:c7:e7:
                    ab:0a:e4:f7:c2:f9:60:93:93:14:5f:3a:2d:15:0c:
                    50:73:f7:b7:b8:43:22:fc:22:8a:04:f4:71:d4:25:
                    9b:5b:fd:17:14:7f:d7:48:2a:a8:51:24:60:a5:44:
                    3d:71:dc:00:b3:40:71:af:09:da:c5:7d:3b:f9:18:
                    0c:78:5b:71:c9:a8:9f:8c:81:f7:05:1f:61:2e:7a:
                    e7:9a:57:a5:3e:20:0b:e6:a9:ce:db:7e:25:aa:03:
                    a9:f7:86:79:c5:1c:da:62:79:03:23:f3:db:49:93:
                    69:3a:fd:0c:c0:7d:21:10:9f:ff:58:53:1e:4e:22:
                    d7:8e:d4:9d:21:5b:e0:06:23:b3:4c:81:8a:f0:3a:
                    df:47:d3:4f:92:3c:61:3f:5d:b8:7c:be:8c:38:94:
                    1e:3e:62:7b:87:a7:08:60:38:a9:9a:9a:d9:54:3e:
                    58:9f:73:49:46:0e:d5:f5:02:50:84:52:af:c2:5b:
                    be:e3:fa:d0:64:db:2c:14:dc:a3:05:0c:63:3c:e8:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl

            X509v3 Authority Key Identifier:
                keyid:7D:26:E3:D5:24:B2:0A:B1:53:3F:85:38:71:0A:8A:B2:97:DF:07:1E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.168.0/22
                  208.91.188.0/22
                IPv6:
                  2604:7c0::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395841

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:ba:6d:61:71:60:86:cd:51:3f:c7:9b:19:aa:7c:0d:cf:ff:
         0d:84:fb:5a:d6:37:98:57:f1:6c:36:22:9d:f6:7c:a8:63:39:
         a9:4b:0d:15:ba:de:4b:39:e6:12:e6:21:e9:12:67:e5:f1:97:
         c9:b1:a5:ae:a9:71:f3:63:aa:77:fa:e2:32:d1:d1:08:77:bc:
         6f:66:8c:97:44:ec:6a:e3:98:a7:9d:83:e9:0a:d1:bd:7c:1c:
         de:ee:c7:1d:07:bf:ec:b0:cc:ae:7b:28:77:e8:6a:0f:59:f5:
         9f:43:fc:d5:8c:a6:19:f4:0e:bf:14:d2:3a:1b:9d:ee:19:9c:
         c5:d6:9b:61:86:a5:e5:e6:03:21:70:e0:51:b2:89:25:6f:1f:
         b4:71:c1:cc:56:af:91:60:be:68:91:4e:e2:13:0a:bc:6e:9c:
         1b:af:6c:b9:f4:c3:02:3c:f8:ea:10:92:74:74:06:e6:6e:32:
         a7:d4:f7:bc:33:03:03:a7:4f:3a:a3:ba:71:b3:06:1e:a2:73:
         67:67:74:a1:c5:59:44:c5:9c:4a:e2:02:c2:b7:1a:18:b4:f5:
         99:eb:18:ce:f0:f7:24:c3:50:5b:30:70:88:6e:cd:9b:4c:41:
         ae:cd:b4:75:5a:b0:3b:41:51:2b:96:a1:54:76:83:0d:39:87:
         6c:ad:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:07:04 2024 by rpki-client on console-ams.rpki-client.org